C:\Users\днс\source\repos\LithiumXBootstrapper\LithiumXBootstrapper.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ZencB.exe
Resource
win10v2004-20240709-en
General
-
Target
ZencB.exe
-
Size
785KB
-
MD5
2f7ec36fefca189d77a1f498096dca48
-
SHA1
6eca6266c06944e26ba26254983229382a6940de
-
SHA256
d6e4cc925ac3b3ee4e9c337e5203e3c9531cea230b0139e0701ec4677c18d033
-
SHA512
766ab3437e5353efd3ffd68a4120a467c1cb27fb5fe14917ddaa7a8c714a9b4bfab3ac8d091a2a3b35fb5d4b149dbea2fc0af977c52d0c0c42388a4667caace3
-
SSDEEP
12288:1M8OcJIgsR6/jvosJOj1MCoP3Qy7M+IhUXhW:1MsFsEbosJOjSC87rx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ZencB.exe
Files
-
ZencB.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 782KB - Virtual size: 782KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ